USB JTAG  

Go Back   USB JTAG > USBJTAG (NT) > Devices > USB JTAG (NT) on SurfBoard Modems > SB6XXX

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 11-15-2014, 10:56 AM
ictvtec ictvtec is offline
Member
 
Join Date: Feb 2007
Posts: 30
Default Dump 6183 yet?

Anyone figured out how to dump the 6183's yet?
Reply With Quote
  #2  
Old 12-03-2014, 06:26 PM
Gruber Gruber is offline
Junior Member
 
Join Date: Dec 2013
Posts: 8
Default

That is the question of the day!

Capone, anyone?
Reply With Quote
  #3  
Old 12-07-2014, 01:17 PM
CAPONE CAPONE is offline
Senior Member
 
Join Date: Dec 2008
Posts: 5,083
Default

I am sure its no problem to read and write to this modem. I have not had the pleasure of getting one in my hands, However am 100% confident that we should be able to read and write to it.

I have posted more than enough times how to manage this situation.

I will get one soon and play with it. My understanding is that the downloads supported on this modem is around 250 Down and 50 Upload. So it will make for a Nice Christmas Update.
__________________
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Reply With Quote
  #4  
Old 12-07-2014, 06:47 PM
Gruber Gruber is offline
Junior Member
 
Join Date: Dec 2013
Posts: 8
Default

http://sourceforge.net/projects/sb61...9.2.0.0-GA-00/

does this help any?

credit goes to Yuji1 from surfboard hacker
Reply With Quote
  #5  
Old 12-11-2014, 06:04 PM
CAPONE CAPONE is offline
Senior Member
 
Join Date: Dec 2008
Posts: 5,083
Default

Here is some Info about the Modem.

Stock firmware is SB6183-9.2.0.0-GA-03-29-NOSH

It has a Spansion FL064PIF BGA Flash, Not SPI as I thought it would.

It does have what appears to be a JTAG Port. I will be playing with it some more to see if in fact it is a JTAG Port.
__________________
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Reply With Quote
  #6  
Old 02-23-2015, 08:35 PM
ictvtec ictvtec is offline
Member
 
Join Date: Feb 2007
Posts: 30
Default

Any updates on dumping??
Reply With Quote
  #7  
Old 02-24-2015, 07:14 PM
CAPONE CAPONE is offline
Senior Member
 
Join Date: Dec 2008
Posts: 5,083
Default

With this model Modem the only way I see to read and write the flash is to remove the BGA Flash and read/write with external BGA Programmer then reinstall Flash.

Anyone that has worked on the di$hn3t HD receivers will know the process.
Its lots of fun and lots of work and $$$ for proper tools.
If you just looking to clone, then may not be worth the work. They do however have extremely nice speeds. I posted a speed test of that model modem.
__________________
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Reply With Quote
  #8  
Old 02-24-2015, 09:39 PM
thaclient thaclient is offline
Junior Member
 
Join Date: Feb 2012
Posts: 20
Default

Can't one just remove the NAND chip, dump the flash with a home-made reader and then refit the chip? The orange ones are sexy.

Last edited by thaclient; 02-24-2015 at 09:42 PM.
Reply With Quote
  #9  
Old 02-24-2015, 09:42 PM
DvDRUS DvDRUS is offline
Member
 
Join Date: Aug 2006
Posts: 68
Default this one

this one



<<HW_REV: 1; VENDOR: Motorola Corporation; BOOTR: 2500; SW_REV: SB6183-9.2.0.0-GA-00-19-DIAG; MODEL: SB6183>>

Last edited by DvDRUS; 02-26-2015 at 11:29 AM.
Reply With Quote
  #10  
Old 02-24-2015, 10:10 PM
thaclient thaclient is offline
Junior Member
 
Join Date: Feb 2012
Posts: 20
Default

The diag 6182 isn't as purdy and is black. But it has a nice lab firmware and a nice diag port on the back

<<HW_REV: 1; VENDOR: Motorola Corporation; BOOTR: 2400; SW_REV: SB6182-3.6.0.0-LAB-556ga-DIAG; MODEL: SB6182>>

Last edited by thaclient; 02-24-2015 at 10:13 PM.
Reply With Quote
  #11  
Old 02-25-2015, 05:32 PM
ictvtec ictvtec is offline
Member
 
Join Date: Feb 2007
Posts: 30
Default

Can we see the inside of the sexy orange?
Reply With Quote
  #12  
Old 02-26-2015, 07:48 AM
thaclient thaclient is offline
Junior Member
 
Join Date: Feb 2012
Posts: 20
Default

:P

Reply With Quote
  #13  
Old 04-22-2015, 05:26 PM
Yuji Saeki Yuji Saeki is offline
Junior Member
 
Join Date: Aug 2011
Posts: 6
Default

Quote:
Originally Posted by Gruber View Post
http://sourceforge.net/projects/sb61...9.2.0.0-GA-00/

does this help any?

credit goes to Yuji1 from surfboard hacker
I'm Yuji1 from SBH, thank you for the credit. Very much appreciated.

Quote:
Originally Posted by CAPONE View Post
With this model Modem the only way I see to read and write the flash is to remove the BGA Flash and read/write with external BGA Programmer then reinstall Flash.

Anyone that has worked on the di$hn3t HD receivers will know the process.
Its lots of fun and lots of work and $$$ for proper tools.
If you just looking to clone, then may not be worth the work. They do however have extremely nice speeds. I posted a speed test of that model modem.
SBH is currently down but I was curious, you spoke of JTAG...any pics on where pinout is? Maybe I can monkey around some. Trying to unpack SB6183-9.2.0.0-GA-03-29-NOSH to enable telnet/ssh and just write back.

Orange diag, I'd love to get my hands on one (even if its dead/blacklisted).

****

*Edit* Figured out how to safely get to the board but I confirm, BGA Spansion flash chip, specifically S25FL064P 24-ball BGA package (6 x 8 mm), 5 x 5 pin configuration (PDF) [page 10, bottom half]. Maybe we could trace the pinouts to the point of being able to solder very tiny wires to it and then USBJTagNT it. Would hope to see serial/JTAG interface of that lovely orange. (thaclient, know where those pinouts go to hook up from?)

*Edit* I've got a BGA re-work station, and when I feel confident (and have a spare modem maybe), I'll try removing it and seeing where the leads go. Who knows, maybe this'd be a simple soldering job. BGA reprogramming adapters are so expensive (you don't need to solder to reprogram the chips, contact-based).

Last edited by Yuji Saeki; 04-27-2015 at 04:23 PM.
Reply With Quote
  #14  
Old 06-04-2015, 08:57 AM
ictvtec ictvtec is offline
Member
 
Join Date: Feb 2007
Posts: 30
Default

Yuji, how is the process coming along?
Reply With Quote
  #15  
Old 06-04-2015, 07:26 PM
CAPONE CAPONE is offline
Senior Member
 
Join Date: Dec 2008
Posts: 5,083
Default

Quote:
Originally Posted by Yuji Saeki View Post
I'm Yuji1 from SBH, thank you for the credit. Very much appreciated.



SBH is currently down but I was curious, you spoke of JTAG...any pics on where pinout is? Maybe I can monkey around some. Trying to unpack SB6183-9.2.0.0-GA-03-29-NOSH to enable telnet/ssh and just write back.

Orange diag, I'd love to get my hands on one (even if its dead/blacklisted).

****

*Edit* Figured out how to safely get to the board but I confirm, BGA Spansion flash chip, specifically S25FL064P 24-ball BGA package (6 x 8 mm), 5 x 5 pin configuration (PDF) [page 10, bottom half]. Maybe we could trace the pinouts to the point of being able to solder very tiny wires to it and then USBJTagNT it. Would hope to see serial/JTAG interface of that lovely orange. (thaclient, know where those pinouts go to hook up from?)

*Edit* I've got a BGA re-work station, and when I feel confident (and have a spare modem maybe), I'll try removing it and seeing where the leads go. Who knows, maybe this'd be a simple soldering job. BGA reprogramming adapters are so expensive (you don't need to solder to reprogram the chips, contact-based).
I have all the equipment to properly de-solder, re-ball and re solder the flash and a Programmer to read and program BGA Flash, I just don't have the time to monkey around with it at this time.

But your Idea is same as Mine, Trace it out to see if we can manage to find solder points that would allow us to read the flash without having to take it off the board. I am somewhat confident that it is possible.
__________________
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -7. The time now is 10:32 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.